CVE-2026-28183: Publishpress Capabilities

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0.

Affected products

• Publishpress Publishpress Capabilities: up to and including 2.45.0

Published 2026-08-06. Last modified 2026-09-23.